Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File:                     TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier:          NObFRDGTXxIkSY10y6hTIq9vddra0Q8sB9eod0BrsUI=
Subject key identifier:   A3:62:16:98:3B:36:C8:0D:3C:E1:D5:EF:12:88:5D:07:AA:08:EC:1E
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer:       /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial:       019EBFC94A1828A7BAC9226FBE83496627B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 07:01:40 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:40 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:40 +0000
Files and hashes:         1: 6h3DLRd0aoO08FWkuvK-DIL1TAI.roa (hash: QbNhinBRvnYOWmudxD6YkQ5YvTv3wj3nF5VH2568D0c=)
                          2: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: 4AXQIxbMkMSn4wAr02JRv8hwhyas6/Nv5O4xU2KsCGs=)
                          3: kzYQmwQKzbuQvS3iB2mDUlnw91Y.roa (hash: bz4ecHp+kkkRf1WW8soaqZgJTcHf8FiOXW+H4gSzf48=)
                          4: lv8af-jyuveaHC9x_OKdx2NgSxI.roa (hash: qC6P7LJylLpMoNR/tNemeZF9+aw6XACba3yU1fASXaI=)
                          5: wMLINqfRL31emUgeWzPrQ7en_WU.roa (hash: 28WktakjRSH95PtqAXbEMoIgPvxQiYsWki+RGQe70G0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:4a:18:28:a7:ba:c9:22:6f:be:83:49:66:27:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
        Validity
            Not Before: Jun 13 07:01:40 2026 GMT
            Not After : Jun 14 07:01:40 2026 GMT
        Subject: CN=a36216983b36c80d3ce1d5ef12885d07aa08ec1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2c:4e:2f:da:a5:93:38:54:48:fb:c0:b5:7b:
                    7e:8b:cb:5b:b3:25:c0:56:c1:ed:54:db:43:51:2c:
                    99:65:b9:db:de:40:b2:f3:fa:80:4c:b7:4d:9e:8c:
                    c8:12:81:1a:65:83:a7:d7:06:7c:07:59:e8:d3:41:
                    87:25:32:c4:13:07:23:9e:79:9c:81:5c:3b:87:55:
                    15:88:8a:51:f2:58:30:0c:96:1f:2f:b0:0e:b7:aa:
                    f6:bb:d7:83:a7:22:ad:3e:22:b3:92:b1:fd:e2:7f:
                    b1:ff:e5:8d:3e:b5:16:f7:19:28:f6:4b:80:56:2e:
                    e3:5e:3c:84:14:3e:f6:8c:ae:ec:7e:a7:cc:cb:4d:
                    15:52:b4:81:d2:27:c5:8c:e2:db:e8:0e:71:ca:95:
                    0e:dd:54:e2:f4:89:8e:e1:28:99:b9:ab:68:4d:13:
                    f2:ac:6d:9b:31:4a:7f:ac:7b:45:93:4f:10:ce:6c:
                    6f:7e:5d:ae:d6:d0:65:8f:e6:9e:39:77:ff:70:bc:
                    20:4a:9c:b3:2f:94:be:95:cc:2f:05:20:8e:c5:32:
                    9a:8b:15:f5:03:2d:e9:3d:50:4f:0a:50:d2:5d:28:
                    5c:01:4e:6f:3b:96:af:8a:2b:93:e9:8c:f7:7e:b9:
                    bb:23:c2:cf:11:78:82:53:6f:7d:d3:6b:f8:15:34:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:62:16:98:3B:36:C8:0D:3C:E1:D5:EF:12:88:5D:07:AA:08:EC:1E
            X509v3 Authority Key Identifier:
                keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:52:8c:67:97:57:a8:9d:2c:5c:45:a9:c8:28:08:0a:da:85:
         6e:88:d7:da:5e:64:44:6d:d9:f0:44:00:8a:7f:b7:2d:2f:b7:
         ac:62:80:cb:4c:43:42:7e:f8:e3:9b:d7:0e:fc:2d:7e:d8:fe:
         c8:12:e6:04:f9:ce:75:9b:d6:08:05:63:8b:c5:98:60:b0:b5:
         e4:68:f1:b7:c7:76:18:f8:72:5a:20:f7:b5:6a:ef:cd:75:13:
         4a:93:50:37:d8:3e:b4:da:b7:29:7b:6e:ae:06:9e:39:f4:96:
         08:7a:ce:0c:61:12:c6:73:b7:91:0c:ea:6d:df:65:db:a2:73:
         f9:63:fe:02:8e:6f:38:f5:60:72:75:52:9d:2f:54:e6:b2:7c:
         78:92:d5:8b:97:f6:aa:24:77:14:9f:23:74:5a:40:0a:27:ea:
         bc:80:9e:b5:63:44:df:8d:e8:f5:c9:a8:2a:c0:10:f2:9c:1c:
         28:56:1b:72:94:c1:c7:8c:a0:c0:34:dd:a9:59:77:97:a3:4f:
         81:d7:1a:04:a0:e1:51:d2:20:23:ed:8d:49:e4:8f:2f:ef:5e:
         0e:a5:4e:eb:b0:2f:18:dd:ac:ec:36:17:a3:a8:8b:b1:83:34:
         0f:20:bc:93:af:73:be:e1:88:b2:07:25:53:5c:fe:77:00:0d:
         fe:eb:79:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:38:20 2026 by rpki-client